Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: dMJfspa4EENyFNF6gcFTIcoExwKJmX8fu6ybpQqfDLs=
Subject key identifier: 67:DE:D1:E5:FB:52:CC:54:10:DC:BE:BC:50:80:66:9A:08:D7:38:5E
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 01A0C444FA20B922645D748ADE484DBA98E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 13C3
Signing time: Mon 21 Sep 2026 14:00:49 +0000
Manifest this update: Mon 21 Sep 2026 14:00:49 +0000
Manifest next update: Tue 22 Sep 2026 14:00:49 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: UU6AuJ/37Eul7ePAmOlM2VsEgyAj+OvaPl5ukx+iadE=)
2: 7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa (hash: 76UePjEP+wElQI63EJrAUQNqnmL6+mG0ZmW2QHArepk=)
3: ICKtn9FiA8o1E110emXc1Z_9SHM.roa (hash: VFWWvtCtDRylV3Kwhn/OLe+sEMZLlpEgPe5DOIGJ9cA=)
4: bRiAj1-hf7sNdEiD1YkRkRllIpg.roa (hash: QwlE0RKPjkh4vpQe1ZoXKOsV7QKRd+qV+VA/PdPxz0M=)
5: iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa (hash: sekPzygHUOkEd1ly9r7LBo/JOh0iiRtcIXhoK8Xl8WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:fa:20:b9:22:64:5d:74:8a:de:48:4d:ba:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Sep 21 14:00:49 2026 GMT
Not After : Sep 22 14:00:49 2026 GMT
Subject: CN=67ded1e5fb52cc5410dcbebc5080669a08d7385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:98:8b:22:6d:ad:25:c4:80:22:29:0f:e3:be:
3c:eb:d5:8f:c8:49:af:58:cf:00:4c:71:aa:7c:81:
34:5c:5b:d9:ba:92:0f:48:c4:b2:3a:a5:f8:46:28:
de:13:65:1b:5f:72:65:85:68:01:bf:11:95:5c:1a:
b7:9a:47:48:80:d6:fa:1e:4f:a6:3f:15:5d:6b:9b:
91:a2:ac:ed:7a:6a:d3:1f:56:3f:3d:7c:10:c7:47:
65:07:3d:af:83:49:08:82:ac:8f:58:3d:30:60:b0:
72:e9:83:f5:f6:e9:7b:98:55:af:45:7f:da:2a:ed:
55:73:17:fe:00:88:f5:a9:fd:3f:12:b5:67:bb:5b:
62:ae:37:84:83:3e:fc:08:12:b5:fd:18:3a:33:96:
89:73:2a:28:40:86:4f:4e:d1:23:7f:27:16:d0:2f:
8d:b3:04:5a:1e:a1:16:bf:e4:76:6d:c7:7f:06:ee:
4e:f5:58:75:20:97:f6:01:46:db:36:75:8e:8e:45:
bc:25:06:09:c0:7b:79:86:2e:b3:12:d8:78:98:3b:
9c:b8:73:de:eb:af:49:ef:bb:74:de:52:c7:fe:64:
d8:46:5a:93:56:7e:22:f8:b2:32:ad:e3:2b:6e:2a:
6d:c6:8f:b5:c5:62:4d:66:57:64:46:9f:09:d0:bb:
96:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:D1:E5:FB:52:CC:54:10:DC:BE:BC:50:80:66:9A:08:D7:38:5E
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:04:c6:73:17:12:61:5d:43:dc:72:3e:44:fe:59:8f:7d:12:
00:fc:7e:71:e0:d0:a5:55:96:46:db:e9:57:3f:49:48:c4:27:
d3:08:4b:8d:11:46:33:c4:e9:a3:40:59:d1:57:bc:5a:ae:40:
26:b3:38:81:d4:ef:4b:42:9b:ab:40:05:da:35:a0:01:13:d7:
64:c0:e1:cc:13:09:f7:7b:e2:f7:56:a7:10:11:95:97:14:d0:
1c:b2:20:a7:05:b8:3a:be:8d:32:15:3b:10:8a:70:ac:35:d8:
1f:f3:53:07:b1:0e:7a:84:5d:99:33:bd:30:d5:88:e0:33:19:
37:30:87:90:93:3c:29:af:7c:d6:a4:3e:c0:17:69:11:fa:70:
ae:22:dc:5f:5e:91:5e:92:0e:d4:95:1f:a8:64:56:63:c9:79:
40:cd:93:0c:f0:39:9d:3b:0c:8e:b3:98:fe:38:66:e2:0d:49:
ce:2c:50:dd:ce:0a:c2:ad:e8:3c:7d:dd:71:35:14:71:5c:81:
a7:e8:c7:09:f8:09:a0:64:d2:43:f4:c2:15:4e:c0:0b:ad:03:
8e:0c:89:dc:1e:34:7b:e5:69:f3:59:b2:07:ed:f7:8d:2c:5d:
c7:41:b3:fb:50:a8:ef:d2:a7:9c:04:57:8c:f9:aa:4f:87:b5:
8b:48:d1:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERPoguSJkXXSK3khNupjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi
Zjg2NWMwHhcNMjYwOTIxMTQwMDQ5WhcNMjYwOTIyMTQwMDQ5WjAzMTEwLwYDVQQD
Eyg2N2RlZDFlNWZiNTJjYzU0MTBkY2JlYmM1MDgwNjY5YTA4ZDczODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4piLIm2tJcSAIikP474869WPyEmv
WM8ATHGqfIE0XFvZupIPSMSyOqX4RijeE2UbX3JlhWgBvxGVXBq3mkdIgNb6Hk+m
PxVda5uRoqztemrTH1Y/PXwQx0dlBz2vg0kIgqyPWD0wYLBy6YP19ul7mFWvRX/a
Ku1Vcxf+AIj1qf0/ErVnu1tirjeEgz78CBK1/Rg6M5aJcyooQIZPTtEjfycW0C+N
swRaHqEWv+R2bcd/Bu5O9Vh1IJf2AUbbNnWOjkW8JQYJwHt5hi6zEth4mDucuHPe
669J77t03lLH/mTYRlqTVn4i+LIyreMrbiptxo+1xWJNZldkRp8J0LuWdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfe0eX7UsxUENy+vFCAZpoI1zheMB8GA1UdIwQY
MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt
NGM4MmFjZTcyYzg1LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1
LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQTGcxcS
YV1D3HI+RP5Zj30SAPx+ceDQpVWWRtvpVz9JSMQn0whLjRFGM8Tpo0BZ0Ve8Wq5A
JrM4gdTvS0Kbq0AF2jWgARPXZMDhzBMJ93vi91anEBGVlxTQHLIgpwW4Or6NMhU7
EIpwrDXYH/NTB7EOeoRdmTO9MNWI4DMZNzCHkJM8Ka981qQ+wBdpEfpwriLcX16R
XpIO1JUfqGRWY8l5QM2TDPA5nTsMjrOY/jhm4g1JzixQ3c4Kwq3oPH3dcTUUcVyB
p+jHCfgJoGTSQ/TCFU7AC60DjgyJ3B40e+Vp81myB+33jSxdx0Gz+1Co79KnnARX
jPmqT4e1i0jRkA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:53:48 2026 by rpki-client